Eresus Sentinel AI/LLM Güvenlik Dokümantasyonu

CWE Eşlemesi

Bu tablo CWE kimliklerini Sentinel kurallarıyla çapraz eşler.

Nasıl kullanılır?

CWE, bulgunun teknik zafiyet ailesini gösterir; Sentinel kural kimliği ise bu zafiyetin AI/ML bağlamında nasıl yakalandığını gösterir. Müşteri raporunda CWE ortak dil sağlar, mühendislik iş kaydında Sentinel kural kimliği yeniden test edilebilir kanıt sağlar.

CWE linkleri MITRE’nin resmi CWE tanımlarına gider.

CWE	Sentinel kuralları
CWE-20	SAFETENSORS-DTYPE-SHAPE-MISMATCH
CWE-22	ONNX-EXTERNAL-DATA-PATH 7Z-PATH-TRAVERSAL COMPRESSED-ZIP-SLIP RAR-PATH-TRAVERSAL
CWE-59	7Z-SYMLINK-ESCAPE
CWE-94	TORCH-SCRIPT-CUSTOM-OP ONNX-CUSTOM-OP GGUF-JINJA-TEMPLATE JIT-DYNAMIC-KERNEL JINJA2-SSTI-001 JINJA2-UNSANDBOXED-TEMPLATE
CWE-95	JIT-EVAL-COMPILE
CWE-190	GGUF-METADATA-OVERFLOW
CWE-200	NET-PRIVATE-RANGE-EGRESS JINJA2-SECRET-EXPOSURE MODEL-SECRET-PII
CWE-250	OCI-ROOT-USER
CWE-266	MANIFEST-OVERBROAD-TOOLS
CWE-345	ONNX-METADATA-TAMPER SAFETENSORS-MISSING-HASH GGUF-UNTRUSTED-QUANT JIT-CACHE-POISONING
CWE-353	MANIFEST-MISSING-INTEGRITY
CWE-400	SAFETENSORS-HEADER-OVERFLOW COMPRESSED-NESTED-DEPTH SCAN-SIZE-MAX-FILE
CWE-409	7Z-BOMB COMPRESSED-DECOMPRESSION-BOMB RAR-BOMB SCAN-SIZE-ARCHIVE-RATIO
CWE-477	SYM-UNRESOLVED-ENTRYPOINT
CWE-494	TORCH-HUB-DYNAMIC-IMPORT NET-UNPINNED-MODEL-URL OCI-UNPINNED-BASE
CWE-502	PICKLE-EXEC PICKLE-GLOBAL-IMPORT TORCH-LOAD-UNTRUSTED
CWE-522	MODEL-SECRET-PRIVATE-KEY
CWE-693	RAR-ENCRYPTED-PAYLOAD
CWE-749	SYM-DANGEROUS-EXPORT
CWE-770	SAFETENSORS-HEADER-OVERFLOW SCAN-SIZE-TENSOR-DIMENSION
CWE-787	GGUF-METADATA-OVERFLOW
CWE-798	OCI-SECRET-IN-LAYER MODEL-SECRET-API-KEY
CWE-829	PICKLE-GLOBAL-IMPORT TORCH-SCRIPT-CUSTOM-OP TORCH-HUB-DYNAMIC-IMPORT ONNX-CUSTOM-OP SYM-NATIVE-LOAD-HOOK MANIFEST-REMOTE-CODE
CWE-915	PICKLE-STRUCT
CWE-918	NET-METADATA-ENDPOINT
CWE-1104	CVE-KNOWN-EXPLOITED CVE-VULNERABLE-RUNTIME CVE-STALE-ADVISORY-DATA

ÖncekiÖncelik Rehberi